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CLAIMS 

1. A method of authenticating communications, 
the method comprising: 

using a mobile communications device, which 
5 includes a cryptographic module for use in mobile 

communication, as an authentication token. 

2. A method of authenticating communications as 
claimed in claim 1, wherein the mobile communications 
device is a WAP- enabled device. 

10 3 . A method of authenticating communications as 

claimed in claim 1 or 2 , wherein the use of the mobile 
communications device as an authentication token 
includes using public key encryption of communications. 

4 . A method of authenticating communications as 
15 claimed in claim 1, 2 or 3 , wherein the mobile 

communications device uses the cryptographic module for 
Wireless Transport Layer Security communications. 

5. A method of authenticating communications as 
claimed in claim 1, 2, 3 or 4 , wherein the mobile 

20 communications device is used as an authentication 

token for a computer, and authenticates communications 
between the computer and an authentication server. 

6. A method of authenticating communications as 
claimed in claim 5, comprising providing a wired 

25 connection between the mobile communications device and 

the computer. 

7. A method of authenticating communications as 
claimed in claim 5, comprising providing a wireless 
connection between the mobile communications device and 

3 0 the computer. 

8. A mobile communications device, comprising a 
cryptographic module, the cryptographic module being 
usable : 

(a) for encoding wireless communications from the 
35 device; 
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(b) for authenticating a user of the device 
towards an authentication server. 

9. A mobile communications device as claimed in 
claim 8, the cryptographic module being usable for 

5 authenticating a user of a separate computer towards 

the authentication server. 

10. A mobile communications device as claimed in 
claim 9, having a short-range wireless communications 
transceiver, for sending signals to and receiving 

10 signals from the computer. 

11. A mobile communications device as claimed in 
claim 10, wherein the short-range wireless 
communications transceiver uses Bluetooth wireless 
technology. 

15 12 . A mobile communications device as claimed in 

one of claims 8-11, wherein the cryptographic module is 
usable to support wireless communications using 
Wireless Transport Layer Security. 

13 . A mobile communications device as claimed in 
20 one of claims 8-12, having means for allowing biometric 

identification of a user. 

14. A mobile communications device as claimed in 
one of claims 8-13, wherein the cryptographic module 
uses public key cryptography. 

25 15 . A mobile communications device as claimed in 

one of claims 8-14, comprising means for sending and 
transmitting data using WAP. 

16. A mobile communications device as claimed in 
one of claims 8-15, wherein the cryptographic module is 

3 0 realised in hardware in the device. 

17. A mobile communications device as claimed in 
one of claims 8-15, wherein the cryptographic module is 
realised in software in the device 

18. A mobile communications device as claimed in 
3 5 one of claims 8-15, wherein the cryptographic module is 
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provided on an external smart card. 

19. A mobile communications device as claimed in 
one of claims 8-15, wherein the cryptographic module 
comprises a Wireless Identity Module (WIM) card. 
5 20. A mobile communications device as claimed in 

claim 19, wherein the cryptographic module comprises a 
Wireless Identity Module (WIM) card which allows 
communications using Wireless Transport Layer Security. 

21. A WAP-enabled mobile communications device, 
10 which is capable of use as an authentication token. 

22. A communications network, comprising: 

at least one WAP gateway, which is enabled to 
encrypt communications on the basis of Wireless 
Transport Layer Security; 

15 at least one authentication server operable in a 

first authentication protocol; and 

a WAP-enabled client device, including a 
cryptographic module, the cryptographic module being 
usable for encrypting communications with the WAP 

20 gateway using Wireless Transport Layer Security, and 

the cryptographic module being further usable as an 
authentication token for authenticating a user of the 
device towards the authentication server, using the 
first authentication protocol. 

25 23 . A network as claimed in claim 22, wherein the 

cryptographic module is realised in hardware in the 
client device. 

24. A network as claimed in claim 22, wherein the 
cryptographic module is realised in software in the 

3 0 client device. 

25. A network as claimed in claim 22, wherein the 
cryptographic module is provided on an external smart 
card. 

26. A network as claimed in claim 22, wherein the 
3 5 cryptographic module comprises a Wireless Identity 
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Module (WIM) card. 

27. A network as claimed in any of claims 22-26, 
comprising a computer, the client device having a 
connection to the computer such that it acts as an 
5 authentication token therefor. 



